$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7515fef9-531f-48e9-baff-2b24b5847449.roa File: 7515fef9-531f-48e9-baff-2b24b5847449.roa (raw, json) Hash identifier: mUl3BZ/4SVkDUoi64ljb2fjQ7ev26IQFUbSTWRYigxI= Subject key identifier: D6:5A:56:FC:F7:1C:CC:BD:4C:F3:2F:DF:24:34:43:D5:63:BA:23:0D Certificate issuer: /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Certificate serial: 49BBAC13D6F5E457DE86AADBD778802BDDC71E0E Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7515fef9-531f-48e9-baff-2b24b5847449.roa Signing time: Fri 31 Oct 2025 01:10:06 +0000 ROA not before: Fri 31 Oct 2025 01:10:06 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:9000:39e8::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:bb:ac:13:d6:f5:e4:57:de:86:aa:db:d7:78:80:2b:dd:c7:1e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce Validity Not Before: Oct 31 01:10:06 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=929f6061c57167a7b889726fb34b5d7b992e5997b00633745e2040e200b2542a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:22:a9:41:29:aa:b1:c6:37:e6:4c:da:77:d2: ea:a9:00:40:9d:4d:d0:d6:0c:60:02:a7:3c:2a:11: 5b:ee:82:45:6d:e2:87:e4:41:63:d7:39:a7:f1:c4: 1a:00:2f:e9:97:03:c7:b2:fb:1e:dc:78:8f:f6:ef: c3:16:a5:bb:7f:c6:b1:a5:26:61:2a:76:aa:56:dc: 6f:92:3b:49:f4:3f:82:8a:c3:61:7a:91:4e:a1:d8: ff:aa:dc:3a:57:47:35:76:b1:3c:34:04:d5:00:74: 05:8c:78:b0:82:8a:21:17:4f:2e:ec:80:6f:a1:10: a4:68:e4:40:93:03:fb:ec:eb:a2:41:da:06:a6:52: 53:14:c8:16:38:4a:c0:df:a6:70:46:fb:8b:bb:84: c7:71:e4:7f:d1:2e:f0:bc:3c:d7:b5:8d:77:7c:6d: 78:c7:85:5c:5b:e6:58:1e:a3:a6:50:d2:0e:85:d3: 8a:a3:66:c4:a8:2d:09:a3:14:b8:d7:7b:0c:b6:28: c2:bf:d5:e4:90:74:57:fb:6a:7a:3d:ef:64:f8:fc: e3:b7:6c:a3:f1:14:0e:c8:fb:26:2b:3d:1d:c1:63: 71:29:29:06:7d:06:20:45:5f:27:40:fd:66:d7:63: 40:c9:ee:1b:e0:12:f5:02:b1:d7:51:99:77:33:fe: 7e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:5A:56:FC:F7:1C:CC:BD:4C:F3:2F:DF:24:34:43:D5:63:BA:23:0D X509v3 Authority Key Identifier: keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7515fef9-531f-48e9-baff-2b24b5847449.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:9000:39e8::/47 Signature Algorithm: sha256WithRSAEncryption 86:fb:b3:d9:8a:fc:07:54:39:35:94:e7:6d:3b:d1:f0:38:b7: 88:c5:29:d9:4f:48:3a:d4:92:d5:34:75:df:14:d2:e5:d5:12: 60:2f:df:35:bf:ad:97:f2:52:80:ee:d3:35:71:da:2e:61:16: 0a:f5:86:0b:31:9f:e6:f0:46:92:61:7e:df:a5:2b:88:e3:75: 64:e3:74:74:1d:b4:66:d3:e4:c2:47:c3:c7:ca:99:27:4f:ea: be:df:17:79:1d:69:31:e2:63:10:ed:24:44:48:35:ed:bc:78: 63:6b:04:97:4d:fb:ab:5d:d9:02:2d:0c:04:91:29:af:a5:2b: e3:fb:f7:f4:39:ab:2a:cd:1c:bb:88:05:d8:cc:af:eb:fa:01: 36:45:77:fb:28:f2:82:c2:c8:ff:9c:cc:d0:6e:c2:c1:e7:c4: d9:5f:a4:d6:c0:78:3b:3e:24:82:8e:d5:17:e6:a5:af:01:23: b1:00:98:4b:d4:ee:b3:1d:86:a5:fc:d3:9d:c0:f3:4e:b8:c7: a4:f5:ee:16:6a:e8:99:a7:c5:1b:5e:d1:ed:20:6d:9f:f4:be: c9:e0:02:f7:ae:2d:f1:9a:a5:a7:0a:51:eb:0a:12:43:69:8e: b3:0a:4b:e0:29:ab:bf:e4:3f:67:5f:92:74:ba:a8:7f:65:c8: d5:1d:b5:9b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUSbusE9b15Ffehqrb13iAK93HHg4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2 NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDMxMDExMDA2WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MjlmNjA2MWM1NzE2N2E3Yjg4OTcyNmZiMzRiNWQ3Yjk5 MmU1OTk3YjAwNjMzNzQ1ZTIwNDBlMjAwYjI1NDJhMS0wKwYDVQQDEyQ5ZjIzMGZh OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgIqlBKaqxxjfmTNp30uqpAECdTdDWDGACpzwqEVvugkVt 4ofkQWPXOafxxBoAL+mXA8ey+x7ceI/278MWpbt/xrGlJmEqdqpW3G+SO0n0P4KK w2F6kU6h2P+q3DpXRzV2sTw0BNUAdAWMeLCCiiEXTy7sgG+hEKRo5ECTA/vs66JB 2gamUlMUyBY4SsDfpnBG+4u7hMdx5H/RLvC8PNe1jXd8bXjHhVxb5lgeo6ZQ0g6F 04qjZsSoLQmjFLjXewy2KMK/1eSQdFf7ano972T4/OO3bKPxFA7I+yYrPR3BY3Ep KQZ9BiBFXydA/WbXY0DJ7hvgEvUCsddRmXcz/n6XAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU1lpW/PcczL1M8y/fJDRD1WO6Iw0wHwYDVR0jBBgwFoAU6PPFIOIO8l06 t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4 MmI2ZTYwNTA1Lzc1MTVmZWY5LTUzMWYtNDhlOS1iYWZmLTJiMjRiNTg0NzQ0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4 LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAJAAOegwDQYJKoZIhvcNAQELBQADggEBAIb7s9mK/AdUOTWU52070fA4 t4jFKdlPSDrUktU0dd8U0uXVEmAv3zW/rZfyUoDu0zVx2i5hFgr1hgsxn+bwRpJh ft+lK4jjdWTjdHQdtGbT5MJHw8fKmSdP6r7fF3kdaTHiYxDtJERINe28eGNrBJdN +6td2QItDASRKa+lK+P79/Q5qyrNHLuIBdjMr+v6ATZFd/so8oLCyP+czNBuwsHn xNlfpNbAeDs+JIKO1Rfmpa8BI7EAmEvU7rMdhqX8053A8064x6T17hZq6JmnxRte 0e0gbZ/0vsngAveuLfGapacKUesKEkNpjrMKS+Apq7/kP2dfknS6qH9lyNUdtZs= -----END CERTIFICATE-----Generated at Wed Nov 5 10:55:59 2025 by rpki-client